Unable to trust root ca in linux

Discussion
1

Just received my Start9 today and followed the instructions for “Trust Your Root CA.” Upon entering the following in the terminal, I get this:

axecaster@axecaster-OptiPlex-7020:~$ sudo bash -c aqua-educator.crt >> /etc/ca-certificates.conf
bash: /etc/ca-certificates.conf: Permission denied

Any help will be greatly appreciated!

2

The Optiplex 7020 is the client from which you accessing your server, correct? What OS is running on this client?

The Permission denied error you are getting is usually related to you not having the correct permissions to execute the command. Make sure you are following the correct guide specific to the OS on your client device carefully without skipping any steps.

3

Running Linux Mint Cinnamon. I did carefully follow the instructions. Everything seemed to work correctly until I got to the sudo bash -c aqua-educator.crt >> /etc/ca-certificates.conf command.

4

I finally got everything working. Thanks!

2 Likes
5

Glad you got it working! Please post what you determined to be the problem, as I’m sure others may find it useful in the future. It also helps us identify possibly unclear parts of the guide.

1 Like
6

I never did get the cert to be recognized by either Chrome or Firefox, but was able to log in securely with my Vivaldi browser. (I’m running Linux Mint)
Thanks!

7

CachyOS (based on Arch) using fish shell in Alacritty/Terminal with Firefox.

I’ve successfully completed trusting Root CA for a node a long time ago but can’t seem to do it for the second now…

cd ~/Downloads
server_name=your-server-name

^ This, gives me this:

fish: Unsupported use of '='. In fish, please use 'set server_name '.
server_name=

I’ve followed the order and it worked. I wanted to include it for the StartOS folks to see so nonetheless since they might wanted to update their instructions.

But now doing this:

sudo pacman -S ca-certificates
sudo cp "${server_name}.crt" /etc/ca-certificates/trust-source/anchors/
sudo update-ca-trust

fish tells me

sudo pacman -S ca-certificates
  sudo cp "${server_name}.crt" /etc/ca-certificates/trust-source/anchors/
  sudo update-ca-trust
fish: ${ is not a valid variable in fish.
sudo cp "${server_name}.crt" /etc/ca-certificates/trust-source/anchors/

What can I use instead of the the fiat bracket thing fish doesn’t like? This one:

${

I’ve replaced the name of my server with “server_name” in the command shown above.

Do I need to switch shells to one… more forgiving? Which one is recommended?

Thanks in advance!

8

You dont need to use any brackets, that is just a placeholder for you to know that you need to change this.

You need to use the name exact name of the Root CA file you downloaded from your server, for example: green-giant.crt and that is it.

This is also your server’s name where you can visit it from a browser on your network by going to in this example: https://green-giant.local (This is only and example :wink: )